CVE-2026-33502

WWBN AVideo is an open source video platform. In versions up to and including 26.0, an unauthenticated server-side request forgery vulnerability in "plugin/Live/test.php" allows any remote user to make the AVideo server send HTTP requests to arbitrary URLs. This can be used to probe...